Skip to content

domain/gcp/cloud-dns

name - string

The domain name of the DNS zone.

This is the dns_name specified by the user in the domain registration.

fqdn - string

The FQDN (fully-qualified domain name) of the DNS zone.

This matches name output and added for consistency with subdomain modules.

zone_id - string

The ID of the GCP Cloud DNS Zone.

nameservers - list(string)

A list of authoritative nameservers for the created domain.

By setting the nameservers in the domain registrar to these records, this domain will have the source of truth for DNS records.

delegator - object

An AWS IAM User and access keys with explicit access to delegate subdomains in this domain to another DNS zone.

Format

value = {
    email   = google_service_account.delegator.email
    key_file = google_service_account_key.delegator.private_key
}
value = {
    email   = google_service_account.delegator.email
    key_file = google_service_account_key.delegator.private_key
}

Required IAM permissions

*
    "dns.changes.create",
    "dns.changes.get",
    "dns.resourceRecordSets.create",
    "dns.resourceRecordSets.delete",
    "dns.resourceRecordSets.get",
    "dns.resourceRecordSets.list",
    "dns.resourceRecordSets.update",
    "dns.managedZones.get",
    "dns.managedZones.list",
*
    "dns.changes.create",
    "dns.changes.get",
    "dns.resourceRecordSets.create",
    "dns.resourceRecordSets.delete",
    "dns.resourceRecordSets.get",
    "dns.resourceRecordSets.list",
    "dns.resourceRecordSets.update",
    "dns.managedZones.get",
    "dns.managedZones.list",